@mnemom/mnemom 0.17.39-next.0 → 0.17.39-next.2

package/dist/vendor/shared/durable-contract/doors.d.ts

@@ -33,10 +33,93 @@ export declare const EXECUTOR_SCOPES: readonly ["user", "org"];
 export type ExecutorScope = (typeof EXECUTOR_SCOPES)[number];
 /** Only these executor kinds may enroll with scope org. */
 export declare const ORG_SCOPE_EXECUTOR_KINDS: readonly ["container", "fleet"];
-/** exec_oidc_exchange refusals (ruling 34.03's S1 changes). */
-export declare const OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off"];
+/**
+ * exec_oidc_exchange refusals (ruling 34.03's S1 changes), each 403, checked in this order.
+ * Amendment 65 (mnemom-test#1331) appends the two single-use codes, checked in the same transaction
+ * as the key insert so a refused or faulted exchange uses nothing up:
+ *   token_replayed         the token's jti was already exchanged;
+ *   run_already_exchanged  this repository_id + run_id + run_attempt already minted a key under
+ *                          another jti (one key per run attempt; a rerun is a new attempt).
+ */
+export declare const OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off", "adopt_ticket_invalid", "token_replayed", "run_already_exchanged"];
+/**
+ * The claims exec_oidc_exchange requires beyond repository, repository_id, ref and event_name
+ * (amendment 65). Each is a string; a token missing one, or with one out of shape, is bad_issuer.
+ */
+export declare const OIDC_EXCHANGE_RUN_CLAIMS: readonly ["jti", "run_id", "run_attempt"];
+/** jti: 1 to OIDC_JTI_MAX characters. */
+export declare const OIDC_JTI_MAX = 200;
+/** run_id and run_attempt: a positive decimal integer, no leading zero, at most 16 digits. */
+export declare const OIDC_RUN_NUMBER_RE: RegExp;
+/**
+ * How long the api keeps a run's exchange record (and so refuses a second mint for it): GitHub's
+ * longest workflow-run life, 35 days. The minted key's grant is far shorter; the record must not be.
+ */
+export declare const OIDC_EXCHANGE_RETENTION_DAYS = 35;
+/** True when the three run claims are present and in shape (amendment 65). */
+export declare function oidcRunClaimsOk(claims: Readonly<Record<string, unknown>>): boolean;
 /** The audience a GitHub OIDC token must name for exec_oidc_exchange (ruling 34.12 (5)). */
 export declare const OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+/**
+ * The workflow input that carries an adopt ticket, sent beside the per-session wake-up's
+ * WAKEUP_SESSION_INPUT. Only the api's wake-up for a session parked awaiting_issue_run sends it.
+ */
+export declare const ADOPT_TICKET_INPUT = "adopt-ticket";
+/** The wake-up's per-session input (mnemom-test#1329), named here so both inputs live in S1. */
+export declare const WAKEUP_SESSION_INPUT = "session-id";
+/** An adopt ticket: the prefix, then 32 random bytes as unpadded base64url (43 characters). */
+export declare const ADOPT_TICKET_RE: RegExp;
+/** A ticket is good for 15 minutes from the wake-up that minted it, and for one exchange only. */
+export declare const ADOPT_TICKET_TTL_S = 900;
+/** exec_oidc_exchange's body keys: oidc_token always, adopt_ticket only from a ticketed wake-up. */
+export declare const OIDC_EXCHANGE_BODY_KEYS: readonly ["oidc_token", "adopt_ticket"];
+/** The longest oidc_token the exchange reads. */
+export declare const OIDC_TOKEN_MAX = 8192;
+/**
+ * The api env var naming the one workflow file (under .github/workflows, no path) that the wake-up
+ * dispatches and the exchange pins. The exchange is dark while it is unset or not a workflow file
+ * name, whatever DURABLE_OIDC_EXCHANGE_MODE says.
+ */
+export declare const OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+/** A workflow file name under .github/workflows: no path, no query. */
+export declare const OIDC_WORKFLOW_FILE_RE: RegExp;
+/**
+ * Amendment 66, part 2 (Durable lead ruling (a), 2026-11-09): the api env var naming the set of
+ * workflow files the exchange accepts, comma-separated bare file names. Unset, the set is
+ * OIDC_WORKFLOW_ENV's one file, exactly as before. Set, it replaces that pin for the exchange only
+ * (the wake-up still dispatches OIDC_WORKFLOW_ENV's file), and a set that is empty or holds any
+ * entry that is not a workflow file name (a wildcard, a "/", a "..") turns the exchange dark.
+ */
+export declare const OIDC_WORKFLOW_SET_ENV = "DURABLE_OIDC_WORKFLOWS";
+/** The most workflow files the set may name. */
+export declare const OIDC_WORKFLOW_SET_MAX = 8;
+/** True when `t` has an adopt ticket's shape. */
+export declare function adoptTicketOk(t: unknown): t is string;
+/**
+ * The exchange body: an object with exactly oidc_token (a non-empty string of at most
+ * OIDC_TOKEN_MAX) and, optionally, adopt_ticket (a string; its shape is adoptTicketOk's, and a
+ * string of the wrong shape is refused adopt_ticket_invalid, not a malformed body).
+ */
+export declare function oidcExchangeBodyOk(v: unknown): boolean;
+/** The pinned workflow file from the env value, or null (then the exchange is dark). */
+export declare function oidcPinnedWorkflow(envValue: string | undefined): string | null;
+/**
+ * The workflow files the exchange accepts, or null (then the exchange is dark).
+ * `setValue` is OIDC_WORKFLOW_SET_ENV's value, `pinValue` OIDC_WORKFLOW_ENV's. With the set unset
+ * the answer is the one pinned file, as oidcPinnedWorkflow reads it. With it set, every
+ * comma-separated entry, trimmed, must be a workflow file name with no "..", and there must be one
+ * to OIDC_WORKFLOW_SET_MAX of them; anything else is null, never a partial set. Duplicates collapse.
+ */
+export declare function oidcWorkflowSet(setValue: string | undefined, pinValue: string | undefined): readonly string[] | null;
+/**
+ * The workflow pin: the token's job_workflow_ref must be exactly
+ * `<repository>/.github/workflows/<pinned file>@refs/heads/<default branch>`, with `repository`
+ * spelled as the token's own claim. Anything else (another workflow, a reusable workflow, another
+ * branch, a tag or sha ref) is refused ref_not_allowed.
+ */
+export declare function jobWorkflowRefOk(jobWorkflowRef: unknown, repository: string, workflowFile: string, defaultBranch: string): boolean;
+/** jobWorkflowRefOk for any one file of an oidcWorkflowSet answer (amendment 66, part 2). */
+export declare function jobWorkflowRefInSet(jobWorkflowRef: unknown, repository: string, workflowFiles: readonly string[], defaultBranch: string): boolean;
 /** durable_org_policy.limits keys (34.05 (1)); live_lease_cap is optional. */
 export declare const ORG_POLICY_LIMIT_KEYS: readonly ["per_session_budget_usd", "live_lease_cap"];
 /** live_lease_cap and the registry default share this range. */
@@ -61,7 +144,7 @@ export declare function effectiveLeaseCap(orgLimits: {
 export declare const DISPATCH_SESSION_CID_PREFIX = "dispatch-";
 export declare const DISPATCH_SESSION_NAME_PREFIX = "job-";
 export declare const CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
-export declare const CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
+export declare const CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused", "parked"];
 /**
  * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
  * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
@@ -75,6 +158,7 @@ export declare const CREATE_READY_SESSION_ANSWERS: Readonly<{
     readonly created: readonly ["outcome", "session_id"];
     readonly existing: readonly ["outcome", "session_id"];
     readonly refused: readonly ["outcome", "reason"];
+    readonly parked: readonly ["outcome", "session_id", "wait_reason"];
 }>;
 /** Whether `v` is a closed answer: its outcome's keys only, a lowercase uuid session_id or a listed reason. */
 export declare function createReadySessionAnswerOk(v: unknown): boolean;
@@ -123,7 +207,7 @@ export declare const POOL_JOB_RETRIES_CONFIG_CAUSE = "pool_job_retries_config";
 /** The org's retry count from its limits.pool_job_retries: the default when absent, null when invalid. */
 export declare function poolJobRetriesOf(limit: unknown): number | null;
 /** The closed refused list (34.12 (8)). */
-export declare const RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable"];
+export declare const RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable", "oidc_adopt_ticket_invalid", "oidc_token_replayed", "oidc_run_already_exchanged"];
 /** Under --fail-mode open, only these may be ridden through, and only once a verified bundle is held (34.12 (2)). */
 export declare const RUNNER_OPEN_MODE_TOLERATED: readonly ["bundle_unavailable", "job_unavailable", "api_unavailable"];
 export declare const RUNNER_MERGE_STRATEGIES: readonly ["external", "merge_on_green"];

package/dist/vendor/shared/durable-contract/doors.js

@@ -6,6 +6,7 @@
  */
 import { ID_RE } from "./paths.js";
 import { UUID_RE } from "./canonical.js";
+import { DISPATCH_PARK_WAIT_REASONS } from "./states.js";
 // ---- Flag (ruling 34.01 (1), (2)) -----------------------------------------------------------
 /** The api env flag that gates every pool behaviour; its value is the org allowlist. */
 export const DURABLE_POOL_CLAIM_FLAG = "DURABLE_POOL_CLAIM";
@@ -44,15 +45,141 @@ export function poolClaimOrgs(flagValue) {
 export const EXECUTOR_SCOPES = ["user", "org"];
 /** Only these executor kinds may enroll with scope org. */
 export const ORG_SCOPE_EXECUTOR_KINDS = ["container", "fleet"];
-/** exec_oidc_exchange refusals (ruling 34.03's S1 changes). */
+/**
+ * exec_oidc_exchange refusals (ruling 34.03's S1 changes), each 403, checked in this order.
+ * Amendment 65 (mnemom-test#1331) appends the two single-use codes, checked in the same transaction
+ * as the key insert so a refused or faulted exchange uses nothing up:
+ *   token_replayed         the token's jti was already exchanged;
+ *   run_already_exchanged  this repository_id + run_id + run_attempt already minted a key under
+ *                          another jti (one key per run attempt; a rerun is a new attempt).
+ */
 export const OIDC_EXCHANGE_REFUSALS = [
     "bad_issuer",
     "repo_not_enrolled",
     "ref_not_allowed",
     "pool_flag_off",
+    "adopt_ticket_invalid",
+    "token_replayed",
+    "run_already_exchanged",
 ];
+/**
+ * The claims exec_oidc_exchange requires beyond repository, repository_id, ref and event_name
+ * (amendment 65). Each is a string; a token missing one, or with one out of shape, is bad_issuer.
+ */
+export const OIDC_EXCHANGE_RUN_CLAIMS = ["jti", "run_id", "run_attempt"];
+/** jti: 1 to OIDC_JTI_MAX characters. */
+export const OIDC_JTI_MAX = 200;
+/** run_id and run_attempt: a positive decimal integer, no leading zero, at most 16 digits. */
+export const OIDC_RUN_NUMBER_RE = /^[1-9][0-9]{0,15}$/;
+/**
+ * How long the api keeps a run's exchange record (and so refuses a second mint for it): GitHub's
+ * longest workflow-run life, 35 days. The minted key's grant is far shorter; the record must not be.
+ */
+export const OIDC_EXCHANGE_RETENTION_DAYS = 35;
+/** True when the three run claims are present and in shape (amendment 65). */
+export function oidcRunClaimsOk(claims) {
+    const { jti, run_id, run_attempt } = claims;
+    return (typeof jti === "string" &&
+        jti.length >= 1 &&
+        jti.length <= OIDC_JTI_MAX &&
+        typeof run_id === "string" &&
+        OIDC_RUN_NUMBER_RE.test(run_id) &&
+        typeof run_attempt === "string" &&
+        OIDC_RUN_NUMBER_RE.test(run_attempt));
+}
 /** The audience a GitHub OIDC token must name for exec_oidc_exchange (ruling 34.12 (5)). */
 export const OIDC_EXCHANGE_AUDIENCE = "mnemom-executor";
+// ---- Adopt ticket and workflow pin (Amendment 66, mnemom-test#1336) -------------------------
+/**
+ * The workflow input that carries an adopt ticket, sent beside the per-session wake-up's
+ * WAKEUP_SESSION_INPUT. Only the api's wake-up for a session parked awaiting_issue_run sends it.
+ */
+export const ADOPT_TICKET_INPUT = "adopt-ticket";
+/** The wake-up's per-session input (mnemom-test#1329), named here so both inputs live in S1. */
+export const WAKEUP_SESSION_INPUT = "session-id";
+/** An adopt ticket: the prefix, then 32 random bytes as unpadded base64url (43 characters). */
+export const ADOPT_TICKET_RE = /^mnm_at_[A-Za-z0-9_-]{43}$/;
+/** A ticket is good for 15 minutes from the wake-up that minted it, and for one exchange only. */
+export const ADOPT_TICKET_TTL_S = 900;
+/** exec_oidc_exchange's body keys: oidc_token always, adopt_ticket only from a ticketed wake-up. */
+export const OIDC_EXCHANGE_BODY_KEYS = ["oidc_token", "adopt_ticket"];
+/** The longest oidc_token the exchange reads. */
+export const OIDC_TOKEN_MAX = 8192;
+/**
+ * The api env var naming the one workflow file (under .github/workflows, no path) that the wake-up
+ * dispatches and the exchange pins. The exchange is dark while it is unset or not a workflow file
+ * name, whatever DURABLE_OIDC_EXCHANGE_MODE says.
+ */
+export const OIDC_WORKFLOW_ENV = "DISPATCH_WAKEUP_WORKFLOW";
+/** A workflow file name under .github/workflows: no path, no query. */
+export const OIDC_WORKFLOW_FILE_RE = /^[A-Za-z0-9_.-]{1,100}\.ya?ml$/;
+/**
+ * Amendment 66, part 2 (Durable lead ruling (a), 2026-11-09): the api env var naming the set of
+ * workflow files the exchange accepts, comma-separated bare file names. Unset, the set is
+ * OIDC_WORKFLOW_ENV's one file, exactly as before. Set, it replaces that pin for the exchange only
+ * (the wake-up still dispatches OIDC_WORKFLOW_ENV's file), and a set that is empty or holds any
+ * entry that is not a workflow file name (a wildcard, a "/", a "..") turns the exchange dark.
+ */
+export const OIDC_WORKFLOW_SET_ENV = "DURABLE_OIDC_WORKFLOWS";
+/** The most workflow files the set may name. */
+export const OIDC_WORKFLOW_SET_MAX = 8;
+/** True when `t` has an adopt ticket's shape. */
+export function adoptTicketOk(t) {
+    return typeof t === "string" && ADOPT_TICKET_RE.test(t);
+}
+/**
+ * The exchange body: an object with exactly oidc_token (a non-empty string of at most
+ * OIDC_TOKEN_MAX) and, optionally, adopt_ticket (a string; its shape is adoptTicketOk's, and a
+ * string of the wrong shape is refused adopt_ticket_invalid, not a malformed body).
+ */
+export function oidcExchangeBodyOk(v) {
+    if (v === null || typeof v !== "object" || Array.isArray(v))
+        return false;
+    const o = v;
+    const keys = Object.keys(o);
+    if (keys.some((k) => !OIDC_EXCHANGE_BODY_KEYS.includes(k)))
+        return false;
+    if (typeof o.oidc_token !== "string" || o.oidc_token === "" || o.oidc_token.length > OIDC_TOKEN_MAX)
+        return false;
+    return !("adopt_ticket" in o) || typeof o.adopt_ticket === "string";
+}
+/** The pinned workflow file from the env value, or null (then the exchange is dark). */
+export function oidcPinnedWorkflow(envValue) {
+    const wf = envValue?.trim() ?? "";
+    return OIDC_WORKFLOW_FILE_RE.test(wf) ? wf : null;
+}
+/**
+ * The workflow files the exchange accepts, or null (then the exchange is dark).
+ * `setValue` is OIDC_WORKFLOW_SET_ENV's value, `pinValue` OIDC_WORKFLOW_ENV's. With the set unset
+ * the answer is the one pinned file, as oidcPinnedWorkflow reads it. With it set, every
+ * comma-separated entry, trimmed, must be a workflow file name with no "..", and there must be one
+ * to OIDC_WORKFLOW_SET_MAX of them; anything else is null, never a partial set. Duplicates collapse.
+ */
+export function oidcWorkflowSet(setValue, pinValue) {
+    if (setValue === undefined) {
+        const pin = oidcPinnedWorkflow(pinValue);
+        return pin === null ? null : [pin];
+    }
+    const names = setValue.split(",").map((n) => n.trim());
+    if (names.some((n) => !OIDC_WORKFLOW_FILE_RE.test(n) || n.includes("..")))
+        return null;
+    const set = [...new Set(names)];
+    return set.length > OIDC_WORKFLOW_SET_MAX ? null : set;
+}
+/**
+ * The workflow pin: the token's job_workflow_ref must be exactly
+ * `<repository>/.github/workflows/<pinned file>@refs/heads/<default branch>`, with `repository`
+ * spelled as the token's own claim. Anything else (another workflow, a reusable workflow, another
+ * branch, a tag or sha ref) is refused ref_not_allowed.
+ */
+export function jobWorkflowRefOk(jobWorkflowRef, repository, workflowFile, defaultBranch) {
+    return (typeof jobWorkflowRef === "string" &&
+        jobWorkflowRef === `${repository}/.github/workflows/${workflowFile}@refs/heads/${defaultBranch}`);
+}
+/** jobWorkflowRefOk for any one file of an oidcWorkflowSet answer (amendment 66, part 2). */
+export function jobWorkflowRefInSet(jobWorkflowRef, repository, workflowFiles, defaultBranch) {
+    return workflowFiles.some((f) => jobWorkflowRefOk(jobWorkflowRef, repository, f, defaultBranch));
+}
 // ---- Per-org live-lease cap (rulings 34.05, 34.05.1) ----------------------------------------
 /** durable_org_policy.limits keys (34.05 (1)); live_lease_cap is optional. */
 export const ORG_POLICY_LIMIT_KEYS = ["per_session_budget_usd", "live_lease_cap"];
@@ -99,7 +226,9 @@ export const CREATE_READY_SESSION_REFUSALS = [
     // 34.10.1 (4): the api-built charter v1 or its envelope does not match the seal; nothing written
     "charter_mismatch",
 ];
-export const CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused"];
+// S1 amendment 64 (mnemom-test#1336): "parked", the seal's repo does not take it through the pool;
+// counted apart from created, and the wake-up never sends for it
+export const CREATE_READY_SESSION_OUTCOMES = ["created", "existing", "refused", "parked"];
 /**
  * Amendment 63 (ruling 34.35): the one test for whether a session creator is a user, shared by the
  * api (owner choice at dispatch, the claim's 403 not_owner, the repair) and its SQL twin
@@ -115,6 +244,7 @@ export const CREATE_READY_SESSION_ANSWERS = Object.freeze({
     created: ["outcome", "session_id"],
     existing: ["outcome", "session_id"],
     refused: ["outcome", "reason"],
+    parked: ["outcome", "session_id", "wait_reason"],
 });
 /** Whether `v` is a closed answer: its outcome's keys only, a lowercase uuid session_id or a listed reason. */
 export function createReadySessionAnswerOk(v) {
@@ -127,9 +257,12 @@ export function createReadySessionAnswerOk(v) {
     const keys = CREATE_READY_SESSION_ANSWERS[a.outcome];
     if (Object.keys(a).length !== keys.length || !keys.every((k) => k in a))
         return false;
-    return a.outcome === "refused"
-        ? CREATE_READY_SESSION_REFUSALS.includes(a.reason)
-        : typeof a.session_id === "string" && UUID_RE.test(a.session_id);
+    if (a.outcome === "refused")
+        return CREATE_READY_SESSION_REFUSALS.includes(a.reason);
+    if (a.outcome === "parked" &&
+        !DISPATCH_PARK_WAIT_REASONS.includes(a.wait_reason))
+        return false;
+    return typeof a.session_id === "string" && UUID_RE.test(a.session_id);
 }
 function sealIdOk(sealId) {
     if (!UUID_RE.test(sealId))
@@ -238,6 +371,10 @@ export const RUNNER_REFUSED_REASONS = [
     "oidc_pool_flag_off",
     "oidc_unavailable",
     "api_unavailable",
+    "oidc_adopt_ticket_invalid",
+    // amendment 65 (mnemom-test#1331): the two single-use exchange refusals, appended
+    "oidc_token_replayed",
+    "oidc_run_already_exchanged",
 ];
 /** Under --fail-mode open, only these may be ridden through, and only once a verified bundle is held (34.12 (2)). */
 export const RUNNER_OPEN_MODE_TOLERATED = [

package/dist/vendor/shared/durable-contract/events.d.ts

@@ -34,7 +34,7 @@ export declare const M1_EXCLUDED_KINDS: readonly ["intent.issued", "intent.commi
  * inbox ack writes it; M1_EXCLUDED_KINDS stays the frozen M1 record), appended so no existing index
  * moves. Mirrors durable_event_kinds (parity test).
  */
-export declare const DURABLE_EVENT_KINDS: readonly ["session.registered", "session.locked", "session.unlocked", "session.resumed", "session.detached", "session.parked", "session.suspended", "session.paused", "session.unpaused", "session.moved", "session.completed", "session.failed", "session.killed", "session.expired", "session.adopted", "seat.hello", "charter.sealed", "charter.amended", "charter.goal_sealed", "charter.card_drift", "profile.amended", "executor.upgraded", "attestation.passed", "attestation.failed", "lease.acquired", "lease.reclaimed", "lease.released", "lease.expired", "lease.fenced", "lease.zombie_call", "lease.stale_admit", "executor.enrolled", "executor.revoked", "executor.spawned", "executor.exited", "executor.contract_violation", "inbox.admitted", "inbox.rejected", "inbox.coalesced", "inbox.held_unsealed", "inbox.queued_for_home", "inbox.reverted", "inbox.delivered", "inbox.unmatched", "inbox.dead", "timer.set", "timer.fired", "timer.cancelled", "trigger.added", "trigger.removed", "trigger.fired", "trigger.suppressed", "trigger.over_cap", "wake.undelivered", "question.asked", "question.answered", "approval.requested", "approval.resolved", "approval.consumed", "approval.expired", "approval.superseded", "approval.single_person_override", "never.held", "chain.posture", "guard.refused", "guard.unavailable", "budget.reached", "grant.renewed", "grant.revoked", "verdict.violation", "identity.mismatch", "containment.pause", "containment.kill", "containment.auto_pause", "governance.degraded_admit", "governance.outage_mode_set", "policy.host_unattended_changed", "workspace.checkpointed", "rearm.recorded", "tip.signed", "session.ready", "session.waiting", "session.wait_cleared", "executor.turn_continued", "inbox.acked"];
+export declare const DURABLE_EVENT_KINDS: readonly ["session.registered", "session.locked", "session.unlocked", "session.resumed", "session.detached", "session.parked", "session.suspended", "session.paused", "session.unpaused", "session.moved", "session.completed", "session.failed", "session.killed", "session.expired", "session.adopted", "seat.hello", "charter.sealed", "charter.amended", "charter.goal_sealed", "charter.card_drift", "profile.amended", "executor.upgraded", "attestation.passed", "attestation.failed", "lease.acquired", "lease.reclaimed", "lease.released", "lease.expired", "lease.fenced", "lease.zombie_call", "lease.stale_admit", "executor.enrolled", "executor.revoked", "executor.spawned", "executor.exited", "executor.contract_violation", "inbox.admitted", "inbox.rejected", "inbox.coalesced", "inbox.held_unsealed", "inbox.queued_for_home", "inbox.reverted", "inbox.delivered", "inbox.unmatched", "inbox.dead", "timer.set", "timer.fired", "timer.cancelled", "trigger.added", "trigger.removed", "trigger.fired", "trigger.suppressed", "trigger.over_cap", "wake.undelivered", "question.asked", "question.answered", "approval.requested", "approval.resolved", "approval.consumed", "approval.expired", "approval.superseded", "approval.single_person_override", "never.held", "chain.posture", "guard.refused", "guard.unavailable", "budget.reached", "grant.renewed", "grant.revoked", "verdict.violation", "identity.mismatch", "containment.pause", "containment.kill", "containment.auto_pause", "governance.degraded_admit", "governance.outage_mode_set", "policy.host_unattended_changed", "workspace.checkpointed", "rearm.recorded", "tip.signed", "session.ready", "session.waiting", "session.wait_cleared", "executor.turn_continued", "inbox.acked", "session.dispatch_parked"];
 export type DurableEventKind = (typeof DURABLE_EVENT_KINDS)[number];
 export declare function isDurableEventKind(v: unknown): v is DurableEventKind;
 /**
@@ -48,6 +48,7 @@ export declare const AMENDMENT_EVENT_GROUPS: Readonly<{
     readonly "session.waiting": "lifecycle";
     readonly "session.wait_cleared": "lifecycle";
     readonly "executor.turn_continued": "lease";
+    readonly "session.dispatch_parked": "lifecycle";
 }>;
 export declare function eventGroupOf(kind: DurableEventKind): EventGroup;
 export declare const EVENT_WRITERS: readonly ["executor", "gateway", "api"];

package/dist/vendor/shared/durable-contract/events.js

@@ -22,7 +22,7 @@
  *  (m) DSR: phase user_erasure, treatment pseudonymize (nulls principal_uid, detail, refs).
  */
 import { canonicalJson, hmacSha256Hex, sha256Hex, HEX64_RE } from "./canonical.js";
-import { DETACHED_REASONS, PAUSED_REASONS, SUSPENDED_REASONS, FAILED_REASONS, PARKED_ONLY_WAIT_REASONS, } from "./states.js";
+import { DETACHED_REASONS, PAUSED_REASONS, SUSPENDED_REASONS, FAILED_REASONS, DISPATCH_PARK_WAIT_REASONS, PARKED_ONLY_WAIT_REASONS, } from "./states.js";
 import { ATTESTATION_CHECKS_M1, CWD_CHECK_CAUSES } from "./codes.js";
 import { EVENT_DETAIL_MAX_CHARS } from "./constants.js";
 import { RUNNER_FAILED_REASON_PATTERN } from "./doors.js";
@@ -246,6 +246,8 @@ export const DURABLE_EVENT_KINDS = [
     "session.wait_cleared",
     "executor.turn_continued",
     "inbox.acked",
+    // S1 amendment 64: dispatch parked a seal (api-written; session.waiting stays executor-only)
+    "session.dispatch_parked",
 ];
 export function isDurableEventKind(v) {
     return typeof v === "string" && DURABLE_EVENT_KINDS.includes(v);
@@ -261,6 +263,7 @@ export const AMENDMENT_EVENT_GROUPS = Object.freeze({
     "session.waiting": "lifecycle",
     "session.wait_cleared": "lifecycle",
     "executor.turn_continued": "lease",
+    "session.dispatch_parked": "lifecycle",
 });
 export function eventGroupOf(kind) {
     if (Object.prototype.hasOwnProperty.call(AMENDMENT_EVENT_GROUPS, kind))
@@ -500,8 +503,14 @@ const KIND_REFS = {
         { field: "wait_reason", equals: "ci", require: ["head_sha"], forbid: ["approval_id"] },
         { field: "wait_reason", equals: "question", require: ["approval_id"], forbid: ["head_sha"] },
         { field: "wait_reason", equals: "budget", require: ["approval_id"], forbid: ["head_sha"] },
+        // amendment 64: a dispatch park carries no commitment
+        { field: "wait_reason", equals: "awaiting_issue_run", forbid: ["head_sha", "approval_id"] },
+        { field: "wait_reason", equals: "repo_arm_unreadable", forbid: ["head_sha", "approval_id"] },
     ]),
     "session.wait_cleared": obj({ wait_reason: ENUM(PARKED_ONLY_WAIT_REASONS) }),
+    // S1 amendment 64: the api's dispatch park. One writer per kind: the executor's park stays
+    // session.waiting; adopt and flip-to-runner journal session.wait_cleared + session.ready.
+    "session.dispatch_parked": obj({ wait_reason: ENUM(DISPATCH_PARK_WAIT_REASONS) }),
     // ---- lead ruling 2026-10-28: the spawn that sent the continue; a separate fact, so
     // executor.spawned's refs stay exactly {spawn_id} ----
     "executor.turn_continued": obj({ spawn_id: UUID }),

package/dist/vendor/shared/durable-contract/freeze-record.d.ts

@@ -121,8 +121,21 @@ export declare const FREEZE_RECORD: Readonly<{
     DEFAULT_LEASE_CAP_ENV: "DURABLE_DEFAULT_LEASE_CAP";
     DISPATCH_SESSION_CID_PREFIX: "dispatch-";
     DISPATCH_SESSION_NAME_PREFIX: "job-";
+    ADOPT_TICKET_INPUT: "adopt-ticket";
+    WAKEUP_SESSION_INPUT: "session-id";
+    ADOPT_TICKET_PATTERN: string;
+    ADOPT_TICKET_TTL_S: 900;
+    OIDC_TOKEN_MAX: 8192;
+    OIDC_WORKFLOW_ENV: "DISPATCH_WAKEUP_WORKFLOW";
+    OIDC_WORKFLOW_FILE_PATTERN: string;
+    OIDC_WORKFLOW_SET_ENV: "DURABLE_OIDC_WORKFLOWS";
+    OIDC_WORKFLOW_SET_MAX: 8;
     READY_SESSIONS_LIMIT_MIN: 1;
     READY_SESSIONS_LIMIT_MAX: 50;
+    ADOPT_SOURCE_REF_MAX: 500;
+    OIDC_JTI_MAX: 200;
+    OIDC_RUN_NUMBER_PATTERN: string;
+    OIDC_EXCHANGE_RETENTION_DAYS: 35;
     READY_USER_TEXT: "waiting for a runner";
     RUNNER_FAILED_PHASE_PATTERN: string;
     AGENT_SESSIONS_READY_CHECK: string;
@@ -330,6 +343,7 @@ export declare const FREEZE_STRUCTURED: Readonly<{
         exec_heartbeat: import("./routes.js").FixedRoute;
         exec_ready_list: import("./routes.js").FixedRoute;
         exec_oidc_exchange: import("./routes.js").FixedRoute;
+        exec_adopt: import("./routes.js").FixedRoute;
         exec_inbox: import("./routes.js").ScopedRoute;
         exec_inbox_take: import("./routes.js").ScopedRoute;
         exec_inbox_ack: import("./routes.js").ScopedRoute;
@@ -724,8 +738,11 @@ export declare const FREEZE_STRUCTURED: Readonly<{
     }>;
     GATEWAY_EVENTS_BODY_KEYS: readonly ["session_id", "kind", "epoch", "idempotency_key", "refs"];
     READY_CAUSES: readonly ["dispatched", "lease_expired", "wait_cleared", "job_failed"];
-    WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget"];
-    PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget"];
+    WAIT_REASONS: readonly ["approval", "moving", "mnemom_unavailable", "ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
+    PARKED_ONLY_WAIT_REASONS: readonly ["ci", "question", "budget", "awaiting_issue_run", "repo_arm_unreadable"];
+    DISPATCH_PARK_WAIT_REASONS: readonly ["awaiting_issue_run", "repo_arm_unreadable"];
+    ADOPT_REFUSED_CAUSES: readonly ["no_parked_seal", "not_parked"];
+    ADOPT_BODY_KEYS: readonly ["source_ref", "nonce"];
     WAIT_REF_KEYS: Readonly<{
         readonly ci: readonly ["repo_id", "head_sha"];
         readonly question: readonly ["approval_id"];
@@ -734,15 +751,18 @@ export declare const FREEZE_STRUCTURED: Readonly<{
     CLEAR_WAIT_OUTCOMES: readonly ["cleared", "stale_ref", "already_clear"];
     EXECUTOR_SCOPES: readonly ["user", "org"];
     ORG_SCOPE_EXECUTOR_KINDS: readonly ["container", "fleet"];
-    OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off"];
+    OIDC_EXCHANGE_REFUSALS: readonly ["bad_issuer", "repo_not_enrolled", "ref_not_allowed", "pool_flag_off", "adopt_ticket_invalid", "token_replayed", "run_already_exchanged"];
+    OIDC_EXCHANGE_BODY_KEYS: readonly ["oidc_token", "adopt_ticket"];
+    OIDC_EXCHANGE_RUN_CLAIMS: readonly ["jti", "run_id", "run_attempt"];
     ORG_POLICY_LIMIT_KEYS: readonly ["per_session_budget_usd", "live_lease_cap"];
     POOL_CLAIM_FIELDS: readonly ["contract_sha256", "contract_version", "cap"];
     CREATE_READY_SESSION_REFUSALS: readonly ["no_dispatch_agent", "dispatch_owner_missing", "seal_not_found", "cell_unmapped", "charter_mismatch"];
-    CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused"];
+    CREATE_READY_SESSION_OUTCOMES: readonly ["created", "existing", "refused", "parked"];
     CREATE_READY_SESSION_ANSWERS: Readonly<{
         readonly created: readonly ["outcome", "session_id"];
         readonly existing: readonly ["outcome", "session_id"];
         readonly refused: readonly ["outcome", "reason"];
+        readonly parked: readonly ["outcome", "session_id", "wait_reason"];
     }>;
     JOURNAL_APPROVAL_KINDS: readonly ["approval.resolved", "approval.consumed"];
     RUNNER_OUTCOMES: readonly ["done", "no_job", "failed", "refused"];
@@ -755,7 +775,7 @@ export declare const FREEZE_STRUCTURED: Readonly<{
         readonly refused: 3;
     }>;
     RUNNER_FAILED_REASONS: readonly ["pr_open_failed", "pr_no_changes"];
-    RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable"];
+    RUNNER_REFUSED_REASONS: readonly ["bundle_too_large", "bundle_malformed", "bundle_wrong_typ", "bundle_schema", "bundle_unknown_key", "bundle_unusable_key", "bundle_retired_key", "bundle_bad_signature", "bundle_code_digest_mismatch", "bundle_not_yet_valid", "bundle_expired", "bundle_binding_mismatch", "bundle_unavailable", "job_unavailable", "contract_bad_sha", "contract_too_large", "contract_sha_mismatch", "contract_not_a_contract", "contract_mismatch_unrecoverable", "claim_needs_key", "claim_ineligible", "claim_unavailable", "lease_lost", "executor_revoked", "executor_unauthorized", "oidc_bad_issuer", "oidc_repo_not_enrolled", "oidc_ref_not_allowed", "oidc_pool_flag_off", "oidc_unavailable", "api_unavailable", "oidc_adopt_ticket_invalid", "oidc_token_replayed", "oidc_run_already_exchanged"];
     RUNNER_OPEN_MODE_TOLERATED: readonly ["bundle_unavailable", "job_unavailable", "api_unavailable"];
     RUNNER_MERGE_STRATEGIES: readonly ["external", "merge_on_green"];
 }>;

package/dist/vendor/shared/durable-contract/freeze-record.js

@@ -15,15 +15,15 @@ import * as C from "./constants.js";
 import { API_CELL_ID_VECTORS_SHA256, CANONICAL_CELL_IDS } from "./cell-id.js";
 import { LEASE_KEY_PREFIX } from "./keys.js";
 import { ARM_HEADER, ARM_VERSION } from "./arm.js";
-import { CHARTER_BY_HASH_BODY_KEYS, CHARTER_BY_HASH_RESPONSE, CHARTER_SEALED_AT_RE, CLAIM_BODY_KEYS, EXEC_SESSIONS_RESPONSE, OWNER_SESSION_VIEW_FIELDS, GATEWAY_EVENTS_BODY_KEYS, EXECUTOR_KEY_HEADER, HEARTBEAT_REQUEST_KEYS, INTERNAL_KEY_HEADER, ROUTES, } from "./routes.js";
+import { CHARTER_BY_HASH_BODY_KEYS, CHARTER_BY_HASH_RESPONSE, CHARTER_SEALED_AT_RE, CLAIM_BODY_KEYS, EXEC_SESSIONS_RESPONSE, OWNER_SESSION_VIEW_FIELDS, GATEWAY_EVENTS_BODY_KEYS, EXECUTOR_KEY_HEADER, HEARTBEAT_REQUEST_KEYS, INTERNAL_KEY_HEADER, ROUTES, ADOPT_BODY_KEYS, ADOPT_SOURCE_REF_MAX, } from "./routes.js";
 import * as D from "./doors.js";
 import { JOURNAL_APPROVAL_KINDS } from "./journal-approvals.js";
-import { PARKED_ONLY_WAIT_REASONS, READY_USER_TEXT, WAIT_REASONS } from "./states.js";
+import { DISPATCH_PARK_WAIT_REASONS, PARKED_ONLY_WAIT_REASONS, READY_USER_TEXT, WAIT_REASONS, } from "./states.js";
 import { SECRET_SCOPE } from "./secret-scope.js";
 import { EXECUTOR_STATE_DIR, EXECUTOR_STATE_DIR_MODE, EXECUTOR_STATE_FILE, EXECUTOR_STATE_FILE_MODE, } from "./paths.js";
 import { ATTRIBUTE_VALUES, DEVICE_VERIFY_AAL_DEFAULT, M1_SPAN_NAMES, SPAN_ATTRIBUTE_KEYS, SPAN_DEVICE_VERIFY_WOULD_REFUSE, SPAN_DURABLE_ADMISSION, SPAN_DURABLE_CLAIM, SPAN_DURABLE_ENROLLMENT, SPAN_DURABLE_SEAT_HELLO, SPAN_DURABLE_SWEEP, SWEEP_LOG_NAME, } from "./telemetry.js";
 import { EVENT_PREIMAGE_FIELDS, EXECUTOR_WRITABLE_KINDS, GATEWAY_EVENTS_ROUTE, GATEWAY_WRITABLE_KINDS, GENESIS_PREV_HASH, READY_CAUSES, TERMINAL_EVENT_KINDS, } from "./events.js";
-import { CLAIM_INELIGIBLE_DETAILS, CLAIM_INELIGIBLE_REASONS, CLAIM_LOST_RACE_REASONS, CLAIM_OUTCOMES, DURABLE_CODES, PARK_REFUSAL_REASONS, HEARTBEAT_ENTRY_FIELDS, HEARTBEAT_RESULT_FIELDS, ENROLL_POLL_ERROR_STATUS, ENROLL_POLL_ERRORS, } from "./codes.js";
+import { CLAIM_INELIGIBLE_DETAILS, CLAIM_INELIGIBLE_REASONS, CLAIM_LOST_RACE_REASONS, CLAIM_OUTCOMES, DURABLE_CODES, ADOPT_REFUSED_CAUSES, PARK_REFUSAL_REASONS, HEARTBEAT_ENTRY_FIELDS, HEARTBEAT_RESULT_FIELDS, ENROLL_POLL_ERROR_STATUS, ENROLL_POLL_ERRORS, } from "./codes.js";
 import { DEVICE_PAGE_MARKERS, FIX_LINES, RISK_LINE_TEXT, RISK_SENTENCE_ID_HOST, STOPPED_FIX, STOPPED_REASON_TEXT, U05_CHECK_TEXT_ATTESTATION_FAILED, U05_CHECK_TEXT_RESPAWN_FAILED, U05_FIXTURE_CHECK, } from "./fixlines.js";
 import { PLUGIN_DIR, PLUGIN_MANIFEST_FAILURES, PLUGIN_MANIFEST_PATH, PLUGIN_MANIFEST_SCHEMA, } from "./spec.js";
 import { AGENT_EXECUTORS_SCOPE_CHECK, AGENT_SESSIONS_READY_CHECK, AGENT_SESSIONS_WAIT_PARKED_CHECK, DURABLE_APPROVAL_SESSIONLESS_SUBJECTS, DURABLE_APPROVAL_SUBJECTS, DURABLE_APPROVALS_TARGET_CHECK, EXECUTE_EXCEPTIONS, M1_ARBITERS, M1_COLUMNS, M1_FUNCTIONS, M1_TABLES, } from "./schema.js";
@@ -151,8 +151,24 @@ export const FREEZE_RECORD = Object.freeze({
     DEFAULT_LEASE_CAP_ENV: D.DEFAULT_LEASE_CAP_ENV,
     DISPATCH_SESSION_CID_PREFIX: D.DISPATCH_SESSION_CID_PREFIX,
     DISPATCH_SESSION_NAME_PREFIX: D.DISPATCH_SESSION_NAME_PREFIX,
+    // amendment 66
+    ADOPT_TICKET_INPUT: D.ADOPT_TICKET_INPUT,
+    WAKEUP_SESSION_INPUT: D.WAKEUP_SESSION_INPUT,
+    ADOPT_TICKET_PATTERN: D.ADOPT_TICKET_RE.source,
+    ADOPT_TICKET_TTL_S: D.ADOPT_TICKET_TTL_S,
+    OIDC_TOKEN_MAX: D.OIDC_TOKEN_MAX,
+    OIDC_WORKFLOW_ENV: D.OIDC_WORKFLOW_ENV,
+    OIDC_WORKFLOW_FILE_PATTERN: D.OIDC_WORKFLOW_FILE_RE.source,
+    OIDC_WORKFLOW_SET_ENV: D.OIDC_WORKFLOW_SET_ENV,
+    OIDC_WORKFLOW_SET_MAX: D.OIDC_WORKFLOW_SET_MAX,
     READY_SESSIONS_LIMIT_MIN: D.READY_SESSIONS_LIMIT_MIN,
     READY_SESSIONS_LIMIT_MAX: D.READY_SESSIONS_LIMIT_MAX,
+    // amendment 64
+    ADOPT_SOURCE_REF_MAX,
+    // amendment 65
+    OIDC_JTI_MAX: D.OIDC_JTI_MAX,
+    OIDC_RUN_NUMBER_PATTERN: D.OIDC_RUN_NUMBER_RE.source,
+    OIDC_EXCHANGE_RETENTION_DAYS: D.OIDC_EXCHANGE_RETENTION_DAYS,
     READY_USER_TEXT,
     RUNNER_FAILED_PHASE_PATTERN: D.RUNNER_FAILED_PHASE_RE.source,
     AGENT_SESSIONS_READY_CHECK,
@@ -265,11 +281,17 @@ export const FREEZE_STRUCTURED = Object.freeze({
     READY_CAUSES,
     WAIT_REASONS,
     PARKED_ONLY_WAIT_REASONS,
+    // amendment 64
+    DISPATCH_PARK_WAIT_REASONS,
+    ADOPT_REFUSED_CAUSES,
+    ADOPT_BODY_KEYS,
     WAIT_REF_KEYS: D.WAIT_REF_KEYS,
     CLEAR_WAIT_OUTCOMES: D.CLEAR_WAIT_OUTCOMES,
     EXECUTOR_SCOPES: D.EXECUTOR_SCOPES,
     ORG_SCOPE_EXECUTOR_KINDS: D.ORG_SCOPE_EXECUTOR_KINDS,
     OIDC_EXCHANGE_REFUSALS: D.OIDC_EXCHANGE_REFUSALS,
+    OIDC_EXCHANGE_BODY_KEYS: D.OIDC_EXCHANGE_BODY_KEYS,
+    OIDC_EXCHANGE_RUN_CLAIMS: D.OIDC_EXCHANGE_RUN_CLAIMS,
     ORG_POLICY_LIMIT_KEYS: D.ORG_POLICY_LIMIT_KEYS,
     POOL_CLAIM_FIELDS: D.POOL_CLAIM_FIELDS,
     CREATE_READY_SESSION_REFUSALS: D.CREATE_READY_SESSION_REFUSALS,

package/dist/vendor/shared/durable-contract/routes.d.ts

@@ -52,6 +52,16 @@ export interface ScopedRoute {
     readonly pre: string;
     readonly post: string;
 }
+/** exec_adopt's body keys, closed (S1 amendment 64): the seal's source_ref and the run's claim nonce. */
+export declare const ADOPT_BODY_KEYS: readonly ["source_ref", "nonce"];
+/** A seal's source_ref is at most this long (the api's batch-seal limit). */
+export declare const ADOPT_SOURCE_REF_MAX = 500;
+/**
+ * Whether `v` is exactly {source_ref, nonce}: source_ref a trimmed, non-empty string of at most
+ * ADOPT_SOURCE_REF_MAX, and nonce under exec_claim's rule (a non-empty string). The lease adopt
+ * creates is fenced on that nonce, so the run holds it with the nonce it sends on every later call.
+ */
+export declare function adoptBodyOk(v: unknown): boolean;
 export declare const ROUTES: Readonly<{
     /** Start an enrollment (device code). */
     exec_enroll: FixedRoute;
@@ -73,8 +83,20 @@ export declare const ROUTES: Readonly<{
     exec_heartbeat: FixedRoute;
     /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
     exec_ready_list: FixedRoute;
-    /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+    /**
+     * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+     * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+     * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+     */
     exec_oidc_exchange: FixedRoute;
+    /**
+     * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+     * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+     * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+     * fenced on the nonce (exec_claim's rule);
+     * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+     */
+    exec_adopt: FixedRoute;
     /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
     exec_inbox: ScopedRoute;
     /** Body {epoch, nonce, limit?}: marks up to limit messages delivered at the live epoch, journals inbox.delivered, answers their delivery text. */

package/dist/vendor/shared/durable-contract/routes.js

@@ -42,6 +42,26 @@ import { HEARTBEAT_ENTRY_FIELDS } from "./codes.js";
 import { parseContract } from "./envelope.js";
 import { GATEWAY_EVENTS_ROUTE, GATEWAY_WRITABLE_KINDS, validateRefs } from "./events.js";
 import { ALL_STATE_REASONS, isSessionState, isValidStateReason } from "./states.js";
+/** exec_adopt's body keys, closed (S1 amendment 64): the seal's source_ref and the run's claim nonce. */
+export const ADOPT_BODY_KEYS = ["source_ref", "nonce"];
+/** A seal's source_ref is at most this long (the api's batch-seal limit). */
+export const ADOPT_SOURCE_REF_MAX = 500;
+/**
+ * Whether `v` is exactly {source_ref, nonce}: source_ref a trimmed, non-empty string of at most
+ * ADOPT_SOURCE_REF_MAX, and nonce under exec_claim's rule (a non-empty string). The lease adopt
+ * creates is fenced on that nonce, so the run holds it with the nonce it sends on every later call.
+ */
+export function adoptBodyOk(v) {
+    if (v === null || typeof v !== "object" || Array.isArray(v))
+        return false;
+    const b = v;
+    if (Object.keys(b).length !== 2 || typeof b.source_ref !== "string")
+        return false;
+    if (typeof b.nonce !== "string" || b.nonce.length === 0)
+        return false;
+    const r = b.source_ref;
+    return r !== "" && r === r.trim() && r.length <= ADOPT_SOURCE_REF_MAX;
+}
 const fixed = (method, auth, path) => Object.freeze({ method, auth, path });
 const scoped = (method, auth, pre, post) => Object.freeze({ method, auth, pre, post });
 const EXECUTORS = "/v1/executors";
@@ -72,8 +92,21 @@ export const ROUTES = Object.freeze({
     // ---- Doors amendment (ruling 34.03) ----
     /** The org-scope executor's claimable pool sessions, oldest first; `?limit=` (READY_SESSIONS_LIMIT_MIN..MAX) is not part of the match. */
     exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
-    /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
+    /**
+     * Body {oidc_token, adopt_ticket?} (doors.ts oidcExchangeBodyOk, Amendment 66). adopt_ticket comes
+     * only from a ticketed wake-up; it is used up before any key is minted and binds the key to one seal.
+     * Amendment 65: single-use per token jti and per run attempt (token_replayed, run_already_exchanged).
+     */
     exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+    // ---- S1 amendment 64 (mnemom-test#1336) ----
+    /**
+     * Body {source_ref, nonce} (adoptBodyOk). The OIDC run's key unparks the parked dispatch seal whose
+     * source_ref is this run's own issue, in its own org and repo, and claims it in one transaction,
+     * and only the seal its adopt ticket was minted for (Amendment 66; a key with no ticket adopts none),
+     * fenced on the nonce (exec_claim's rule);
+     * answers the exec_claim answer, or adopt_refused / seal_repo_mismatch, changing nothing.
+     */
+    exec_adopt: fixed("POST", "executor_key", "/v1/executor/adopt"),
     // ---- inbox, executor side (S1 amendment 60) ----
     /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
     exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),

package/dist/vendor/shared/durable-contract/schema.d.ts

@@ -114,9 +114,9 @@ export declare function approvalSubjectHash(subject: Readonly<Record<string, unk
  */
 export declare const AGENT_SESSIONS_READY_CHECK: string;
 /**
- * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2)): ci, question and budget are valid only with
- * state 'parked', and wait_ref is set exactly when wait_reason is one of them. The wait_reason
- * CHECK lists WAIT_REASONS.
+ * agent_sessions_wait_parked_ck (ruling 34.06 (1), (2); amendment 64): every PARKED_ONLY_WAIT_REASONS
+ * value is valid only with state 'parked'. wait_ref is set exactly when wait_reason is ci, question
+ * or budget; the DISPATCH_PARK_WAIT_REASONS carry none. The wait_reason CHECK lists WAIT_REASONS.
  */
 export declare const AGENT_SESSIONS_WAIT_PARKED_CHECK: string;
 /** agent_executors.scope CHECK (ruling 34.03 (1)). */